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Abstract — We propose an eavesdropping experiment with linear optical 1— >3 phase-covariant quantum 
cloner. In this paper, we have designed an optical circuit of the cloner and shown how the eavesdropper (Eve) 
utilizes her clones. We have also optimized the measurement scheme for Eve by numerical calculation. The 
optimized measurement is easy to implement with liner optics. 
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1 Introduction 

Quantum key distribution, which ensures the secure com- 
munication between two parties, is one of the most promis- 
ing technologies in the field of quantum information pro- 
cessing. Many researches about the security of QKD have 
been done not only in the ideal condition 1 1 1 but practical 
conditions[2|. However, there have been few experimental 
research of such security analysis i.e. attempt of eavesdrop- 
ping. In this paper we explore an eavesdropping experiment 
with a quantum cloner using linear optics, because it is well 
known that linear optics is the useful tool to construct small- 
scale quantum computers. 

2 Phase-covariant quantum cloning 

Although it is impossible to prepare the perfect clone 
of quantum states (No-cloning theorem), imperfect cloning 
can be achieved. Firstly Buzek and HilleryQ proposed the 
universal quantum cloner, which duplicates the unknown 
qubits. However the universal cloning is superfluous for 
eavesdropping BB84 protocol, since the input state is re- 
stricted to the part of Hilbert space. On the other hand, 
phase-covariant cloning [4] offers a better quality of output 
clones, at the cost of the restriction for the input state to 
the equator of the Bloch sphere. Hence we utilize phase- 
covariant cloning for eavesdropping. 

2.1 Experimental setup 

An experimental setup to implement linear optical 1— >3 
phase-covariant quantum clonerj5| is shown in FigOjThis 
setup consists of the beam splitter array, called tritter\6\, 
one of the three inputs is for Alice qubit and the others are 
for Eve's ancillas. Here we assume classical bit "0", "1" 
of Alice is encoded to {| + x) = I9>±l>, | - x) = or 

{l + y) = !9 yp>l ~y) = respectively. Hence the 



input state is written by 



Win) = 



|0) + e"*|l) 



V2 

={0,^,-f,f} 



(1) 



and these are physically represented by the photonic polar- 
ization or the relative phase between two coherent pulses 
(time-bin). After combining the three inputs^ at the tritter, 
the tripartite entangled state |£(0, r)) is obtained as follows; 

|¥ta>®|O>|l>mdIla-H?(0,r)> 

i(r - 1) Vr 

- 2 |0)Bob|0)Evei|l)Eve 2 

+ i(2/r 3/2 + 3r - 2i yf?- l)|0) B ob|l)Eve I |0> Eve2 

+ i(2/r 3/2 - 3r- 2i V^+ l)|l>Bob|0> Evei |0> Eve2 



z(r- l)Vr 



|l}Bob|l)Eve,|0)Eve, 



+ -(2/r 3/2 -3r-2/V^+ l)|l>Bob|0> Evei |l>Eve 2 

+ I(2/r 3/2 + 3r-2/V^- l)|0> B ob|l>Ev ei |l>Eve 2 

(2) 

where r is the branching ratio of the variable ratio beam 
splitter (VBS). Eve sends the first qubit \)s b to Bob and 
keeps the remaining two qubits |)EveJ)Eve 2 - The success 
probability of this cloning operation is 

, , 1 - 3r 2 + 6r 3 
Psudr) = . (3) 

We plot it in Fig|2] 

'We post-selected the events where one and only one photon is de- 
tected on one detector. 
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Figure 1 : Schematic of the eavesdropping circuit with linear 
optics. HBS: Half beam splitter, VBS: Variable ratio beam 
splitter 



2.2 Single qubit fidelities 

The single qubit fidelities, which indicate the performance 
of the doner, can be calculated as follows 

F Bob (r) = CPtolpBobPJW 

-1 + r + r 2 - 5r 3 
1 - 3r 2 + 6r 3 ' 

(r) = (^inlpEvell^in) 

l + 4r- llr 2 + 10r 3 



(4) 



Evel 



2 - 6r 2 + 12r 3 

" Eve 2 

_ l+4r-llr 2 + 10r 3 
2 - 6r 2 + 12r 3 



(5) 



(6) 



where PBob>PEvei>PEve2 are local density matrices obtained 
by partial-tracing the whole density matrix |£X£| over the 
other qubits. We plot F^ob, ^Evei and fE Ve 2 as a function of 
the branching ratio of r in Figj2] It should be noted that the 
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Figure 2: Single qubit fidelity v.s. r (branching ratio of BS) 
and success probability 



clone for Bob is perfect, when r — 0, or r — 1 . In both case, 
Eve has no information about the input state. The first case 
is trivial, since the input state is perfectly reflected by the 
VBS. On the other hand, the latter case corresponds to the 
quantum teleportation, where the the input state has been 
teleported to Bob's side0 



2 Because of the post-selection, the entangled state has been generated 
in HBS1. Then, conditional Bell state measurement! 7 ] has been achieved 



3 Eavesdropping 

In order to evaluate the performance of the proposed doner 
as an eavesdropper, we derive the relation between error rate 
of Bob and the amount of information obtained by Eve. 

3.1 Bit errors 

The quantum bit error rate (QBER) is written by 

(1 - Pb(0)){1 - F Bob ) + p B (0)p d 



QBER 

Pd=a 



(7) 



1 - p B (0) + 2p B (0) Pd 

>1 -^Bob = D. 

Pd : dark count 

Pb(0) : Probability that Bob detects no photon 



where D is disturbance that characterizes the intrinsic error 
of communication channel, and Eve can control it by chang- 
ing the r(branching ratio) as shown in Eq.©. As shown in 
Eq.Qt, QBER is equivalent to D, if there is no dark count 
on Bob. Since Eve cannot draw any information from the 
dark count contribution, we focus on disturbance in the rest 
of this paper. 

3.2 Eve's information 

Let us calculate the amount of Eve's information /E Ve as 
a function of disturbance. We assume that Eve can keep 
her qubits on quantum memory until Alice reveals the basis. 
Eve knows the basis on which Alice encoded her classical 
bit, so she only has to discriminate pEve(0),pEve(^) (or pEve 
(-^/2),pEve(7!'/2)) to obtain the information about the input 
state, where pEve(^) denotes Eve's local density matrix de- 
fined as follows; 



PEve =Tr Bo bl£(0,r)><£(0,r)|. 
Eve's information Iev^s, written by 
/ Ev e(M*)=y,Tr4M* 

Tr(pjM k ) 



k 



ipj) = 



2/TrpjMi2; m Tr(p m M k ) 
{pEve(0),p E ve0r)} for x-basis 

{PEve(-7!72),p E ve(7T/2)) fory-basis 



(8) 

(9) 
(10) 

(11) 



where is Eve's measurement operator. This implies that 
the amount of information refers to how well Eve can dis- 
criminate the state by choosing appropriate measurement of 
{Mk}- We calculated /E Ve with the following conventional 
measurement and plotted it in Fig@] 



M° = |+X+I®l+X+I 
M° 2 =\+){+\®\-){-\ 

-K-I®l+X+I 
-><— I <s> ]— ><— I 



M° 3 



(12) 



Note that these measurements are same as Bob's. 



by HBS2 



3.3 Optimal POVM 

We have optimized POVMs by the numerical calculation! 8 1 
The optimized POVMs are given by 



Mi = \x-e)(X-e\ ® \Xe)<Xe\ 
M 2 = W-s)(X-e\ ® \Xn+e)<Xn+e\ 
M 3 = \Xn-e)<Xn-e\ ® \Xe)ixe\ 
M A = \Xn-e)<Xn-e\ ® \Xn+e)<Xn+el 



(13) 
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The phase factor 6 is determined by the disturbance, as plot- 
ted in Fig 0] We plot 7 Eve with the optimal POVMs in FigjU 
which corresponds to the accessible information! 10|. The 
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Figure 3: The phase factor 6 in the optimal POVM 



In conclusion, we proposed an eavesdropping experiment 
for BB84 protocol. We have designed not only the optical 
cloning circuit but the measurement scheme in order that 
Eve obtains the accessible information. 
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Figure 4: Disturbance v.s. Information 



optimal measurement makes an improvement over conven- 
tional measurement. It should be noted that these optimal 
POVMs are separable. Moreover it is easy to implement 
with linear optics, because the optimal POVMS are realized 
by adjusting the measurement basis (i.e. the angle of the 
polarizers) for each output port. 



